CVE-2022-48457

EUVD-2022-51153 · Published Nov 1, 2023

In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed

Technologies

Unisoc Sc9863AUnisoc Sc9832EUnisoc T770Google AndroidUnisoc T820Unisoc T612Unisoc T760Unisoc S8000Unisoc T616Unisoc T618Unisoc Sc7731EUnisoc T610Unisoc T606Unisoc T310

Weaknesses

CWE-20

CVSS scores

v3.15.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Privilege Escalation

T1068Exploitation for Privilege Escalation

References

https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857

Potentially impacted assets

See if this affects your attack surface